Privacy policy

This page explains what Airrow stores when you use airrow.app, why it is stored, and who else can see it. It describes the product as it is built, not as a generic template.

What we store

• Account data. Your email address, your display name, and the authentication record held by our auth provider. Passwords are never stored in readable form.
• Project data. Your interview answers, the project model derived from them, and the documents generated for you. This is your intellectual property and we treat it that way.
• Operational logs. Request metadata, identifiers, timestamps and errors. Logs deliberately carry IDs and metadata only, never your answers or the contents of generated documents.

Why we store it

To run the service you asked for: authenticate you, keep your projects separate from everyone else's, generate your foundation, and let you download it again later. We also keep the minimum needed to secure accounts and diagnose failures. We do not sell your data, and we do not use it for advertising.

Who processes it

• Vercel hosts the application and serves it over its network.
• Supabase provides the database, authentication and file storage where your projects live.
• Anthropic receives the parts of your project model needed to author your documents, and processes them under its API terms to return the generated text.

These are processors acting on our instructions. We add no analytics, advertising or session-recording services.

How it is protected

Every resource belongs to an organization, and access is enforced in the database itself through row-level security as well as in the application. Data is encrypted at rest, downloads are served through short-lived signed links, and repository access, where you connect it, uses scoped app installations rather than personal access tokens.

How long it is kept

Project data is kept until you delete it. Deleting a project cascades to its interview, project model, generation jobs, artifacts and stored files. Deleting your account removes your organization and everything hanging off it. Backups and logs age out on their own retention schedule shortly afterwards.

Your rights

If you are in the EU or UK you can ask for a copy of your data, correct it, have it erased, restrict or object to processing, and complain to your national supervisory authority. You can delete projects and your account yourself at any time. For anything else, write to hello@airrow.app.

Cookies

Airrow sets only the cookies it needs to work. They are listed in the cookie policy.

Changes

When this policy changes, the date at the top of the page changes with it. Material changes are announced in the application before they take effect.